Process GDPR Request
Approves a pending request and runs it.
Overview
See the GDPR Requests overview for the full feature flow.
All admin endpoints require an admin Bearer token — see Authentication.
| Endpoint | Method |
|---|---|
/api/admin/customers/gdpr-requests/{id}/process | POST |
Response fields
| Field | Type | Notes |
|---|---|---|
id / requestId | integer | The processed request ID. |
customerId | integer | The customer the request belongs to. |
type | string | update or delete. |
status | string | approved after a successful process. |
customerDeleted | boolean | true when a delete request cascaded the customer deletion. |
processedAt | string | Timestamp the request was processed. |
message | string | null | Optional note recorded on the request. |
Destructive action
For type=delete requests this cascades the customer deletion. For type=update requests it only marks the request approved — apply the requested edits through the regular Customer update endpoint.
Idempotency by rejection
Already-approved or revoked requests are refused with 422.
Permission: customers.gdpr_requests.edit.